Azure AI Face
Detects, analyzes, verifies and identifies human faces, with liveness checks, under Limited Access approval.
- Provider
- azure
- Kind
- AI service
- Category
- Compute
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| auth | enum | api-key | oauth | iam | none | no | — | ▸ api-key |
| contentFiltering | boolean | — | no | — | inherited |
| customerManagedKeys | boolean | — | no | — | ▸ false |
| dataResidency | enum | us | eu | asia | global | no | — | inherited |
| dataRetentionDays | integer | — | no | — | inherited |
| keyStore | boolean | — | no | false | inherited |
| limitedAccessApproval | boolean | — | no | true | inherited |
| livenessDetection | boolean | — | no | false | inherited |
| managed | boolean | — | no | false | ▸ true |
| maxImageSizeMb | integer | — | no | 6 | inherited |
| modality | enum | text | vision | speech | multimodal | structured | image | video | audio | embedding | rerank | no | — | ▸ vision |
| publicEndpoint | boolean | — | no | — | ▸ true |
| quotaUnitsPerMinute | integer | — | no | — | inherited |
| rateLimitRpm | integer | — | no | — | inherited |
| rateLimitTpm | integer | — | no | — | inherited |
| recognitionOperations | enum | detect-only | verify | identify | no | detect-only | inherited |
| viaGateway | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
This AI vendor is reached with an API key, and nothing in the design holds or rotates that key. It ends up in environment files or code, every caller shares it, and a single leak runs up the vendor bill until someone notices. Put the key in a key-management component, or say it is held there with keyStore.
- — all of these hold:
- — the node's `auth` is "api-key"
- — the node's `keyStore` is false
- — the node has at least one incoming edge from an app-server, worker or client
- — this does not hold:
- — the design contains a node of kind key-management
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
nodes:
- { id: "ai-face", component: "azure-ai-face" }# yaml-language-server: $schema=../../schema/component.schema.json # Azure AI Face: face detection, liveness, verification and identification against person groups. # "What is the Azure Face service?" states access is limited and granted only through the Face Recognition intake form, that liveness SDKs are gated, that input images must be 6 MB or less, and that a person group holds up to 1,000,000 persons with up to 248 faces each. schemaVersion: "1" type: "component" id: "azure-ai-face" kind: "ai-service" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/ai-services/face/overview-identity" defaults: auth: "api-key" managed: true modality: "vision" publicEndpoint: true customerManagedKeys: false properties: limitedAccessApproval: type: "boolean" default: true livenessDetection: type: "boolean" default: false recognitionOperations: type: "enum" values: ["detect-only", "verify", "identify"] default: "detect-only" maxImageSizeMb: type: "integer" default: 6